-
Scammers have weaponized a legitimate spend-management platform to send phishing messages and validate stolen financial credentials, turning trusted payment infrastructure into an operational part of fraud instead of attacking it directly. Group-IB doc…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Japanese police arrested a Chinese couple accused of hiding a computer in a Kobe hotel to send phishing emails and using stolen credit card details for purchases.
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
More than 40,000 organisations have received fake calendar invitations designed to steal Microsoft account credentials, according to new…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Microsoft and international partners have disrupted infrastructure supporting CoGUI. This phishing kit Proofpoint says generates more than 100 million malicious emails monthly. The coordinated action targeted a Chinese-speaking fraud ecosystem encompas…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Microsoft and Health-ISAC seize domains linked to YAM Store, CoGUI and Iron Man, services that enabled over 1…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Iron Man System, a commercial phishing-as-a-service platform supplying criminals with ready-made websites impersonating banks, couriers, tax agencies, traffic authorities, and other trusted organizations worldwide. Researchers purchased a license throu…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Attackers abused Microsoft Power BI to deliver unauthorized ScreenConnect remote monitoring and management (RMM) clients, using trusted Microsoft infrastructure to disguise phishing links and establish persistent access. Huntress observed the campaign …
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
The FBI and DOJ seized domains and disrupted scanning and spear-phishing tools used by Flax Typhoon, a China-linked…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
A human-operated phishing platform impersonating AI advertising products to steal credentials and manipulate multifactor authentication workflows. The operation targets advertising professionals through convincing account-connection pages, with researc…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Russian group Star Blizzard expands phishing campaigns with a new malware delivery RedFlick technique, using scheduled tasks to deliver the CosmicPulse backdoor.
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
